← All advisories

High severity7.5NVD Advisory· Published Mar 20, 2020· Updated Jun 17, 2026

CVE-2019-19324

CVE-2019-19324

Description

Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Xmidt/Cjwt
cpe:2.3:a:xmidt:cjwt:*:*:*:*:*:*:*:*
Range: >=1.0.1,<2019-11-25
Xmidt/cjwtdescription
Xmidt Org/Cjwtllm-fuzzy
Range: <2019-11-25

Patches

Vulnerability mechanics

References

2

github.com/xmidt-org/cjwt/commit/9304d3e94242c1a6df77b21bde0e949392e1040anvdPatchThird Party Advisory
github.com/xmidt-org/cjwt/pull/29nvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.